European Space Agency
Intergovernmental space programme
Secure communication for space missions, from clean room to mission control.
Troop Messenger is secure messaging, calling and file sharing for the space sector. Space agencies and private space companies run it on their own servers or a fully air-gapped network, so mission data, design files and operations discussions never sit on someone else’s cloud.
- On-Premise
- Air-Gapped
- Partner Guest Access
Space Organisations That Keep Mission Data at Home
Airbus Defence and Space
Defence and aerospace manufacturing
GMV
Space and defence systems
UK Hydrographic Office, Ministry of Defence
National hydrographic and defence data
What Is Secure Communication for Space Missions?
Secure communication for space missions is messaging, calling and file sharing that a space agency or space company hosts itself, so the teams that design, launch and operate spacecraft coordinate without mission data or export-controlled files passing through a third party’s cloud.
It does not replace the command and telemetry links to a spacecraft. It secures the human side of every mission: engineers, operators, partners and suppliers talking to each other, which is where most leaks and social engineering attacks begin.
| Used by | Space agencies, satellite operators, launch providers, ground segment and earth observation teams, and their suppliers |
|---|---|
| Deployment | On-premise, private cloud or fully air-gapped (Troop-GRIT) |
| Partners | Orange Member guest access for agencies, primes, suppliers and customers |
| Controlled data | Stays on your servers. |
| Record | Audit logs, retention and export for incident reports |
| In use at | European Space Agency, Airbus Defence and Space, GMV |
Why the Space Sector Cannot Wait to Secure Its Communications
The ground segment is now regulated.
The EU’s NIS2 Directive already covers operators of space ground infrastructure, and the proposed EU Space Act adds incident reporting within 24 hours and crisis communication duties.
Space is a proven cyber target.
The 2022 cyberattack that disabled thousands of satellite broadband terminals across Europe showed that attackers go after the ground side first.
Missions run on many organisations.
Agencies, primes, suppliers, launch providers and customers share one programme, but not one network.
Engineers default to consumer apps.
Design files, test photos and launch-day updates end up on personal apps, outside export control and audit.
How Space Organisations Use Troop Messenger, from Design to Operations
Every mission.Every partner.Your data stays yours.
Six space workflows that move faster, and stay controlled, on one secure channel.
01
Mission control
Mission control and satellite operations
Flight controllers, on-call engineers and payload teams coordinate passes, anomalies and handovers, with alerts from mission systems .
02
Launch
Launch campaigns and launch day
Launch site, range, customer and payload teams share one controlled channel through the countdown, with a full record.
03
Ground segment
Ground stations and the ground segment
Station operators across sites report status, outages and schedule changes in real time.
04
Engineering
Spacecraft design, integration and test
Clean room, test and engineering teams share photos, procedures and non-conformances during assembly, integration and test.
05
Partners
Agency, prime and supplier programmes
Bring agencies, primes, subcontractors and international partners into named programme groups as guests.
06
Customers
Earth observation and customer delivery
Tasking requests, data delivery and customer support for government and commercial users, kept apart from internal channels.
Six Controls a Space Programme Needs
Programmes span agencies, companies and countries. These controls keep each conversation with the right people.
01
Units
Separate missions, programmes, sites and partner organisations, and control which can communicate.
02
Orange Member
Partners, suppliers and customers join named groups only, without an account on your network.
03
Forkout Broadcast
Send one launch-day update, anomaly notice or procedure change to every team at once.
04
Role-Based Access
Feature-level permissions for sharing files, calling external users and exporting.
05
Audit Logs
Every action logged and exportable, SIEM-ready via Syslog, for incident reports and reviews.
06
Instant Revocation
Remove a leaver or a supplier the moment a contract or launch campaign ends.
Security for Mission and Programme Data
Named algorithms, keys on your own servers and a complete audit trail.
End-to-End Encryption
Every message, call and file is encrypted end-to-end.
On-Premise & Air-GappedPost-Quantum Cryptography VPN
A PQC-secured tunnel established before any data exchange begins.
On-PremiseBurnout
A private window that leaves no trace once closed.
All deploymentsMulti-Factor Authentication
Password, app PIN and biometrics, enforced from the admin console.
All deploymentsLDAP, Active Directory & SSO
One source of truth for access, roles and deprovisioning.
All deploymentsMobile Device Management
Compatible with solutions from all major MDM providers.
On-PremiseAudit Logs
Complete activity logs, timestamped and exportable.
On-Premise & Air-GappedLawful Interception (TM-Monitor)
Authorised review of official communication under your own policies.
On-Premise & Air-GappedScreenshot & Recording Controls
Enforced by the administrator, not left to the user.
All deploymentsThree Ways to Deploy.None of Them Put Mission Data on Someone Else’s Cloud.
Deployment model
On-Premise
Runs on
Your servers, behind your firewall
Built for
Agency centres, mission control and ground stations
Data leaving your perimeter
Never
Deployment model
Air-Gapped: Troop-GRIT
Runs on
A fully isolated network with no internet path
Built for
Classified, defence and dual-use missions
Data leaving your perimeter
Never
For classified and dual-use missions, with signed offline updates your team verifies.
Deployment model
Private Cloud
Runs on
Your own AWS, Azure or GCP tenancy, in the region you choose
Built for
Private space companies with cloud operations and residency rules
Data leaving your perimeter
Never
Same platform. Different environments. Complete control.
Licensed per user, with no charges for messages, storage or bandwidth. See on-premise pricing.
Your Mission.Your Network.Your Decision.
Choose a security briefing, a pilot on your own network, or a programme quote. Verified space-sector enquiries receive a reply within two business days.
Security briefing
45 minutes with our solutions architect.
Pilot on your network
The complete product on your server or isolated test network.
Programme quote
A formal proposal for your users, sites and deployment.
GET IN TOUCH
Talk to our deployment team
Tell us about your requirements and we'll get back to you shortly.
Integrations
Connects to YourMission and Engineering Systems
Secure REST APIs and webhooks run inside your own network, so your systems post alerts, approvals and updates into the right channels without opening a door to the internet.
- 1
Mission control and monitoring
Anomaly and pass alerts from mission control and monitoring systems post to the on-call channel
- 2
Ground station scheduling
Station outages and schedule changes reach operators across sites.
- 3
PLM, ERP and test systems
Change requests, test results and supplier delays reach the right programme group.
- 4
Identity and HR
Joiners and leavers flow from Active Directory and HR, so access stays current.
At a glance
Mission-readyDeployment
On-premise, private cloud or air-gapped
Partner access
Guest access per programme
Dedicated deployment support and a custom SLA included.
FAQ
Frequently Asked Questions
Yes. Orange Member gives partner agencies, primes, suppliers and customers guest access to named programme groups only.
Yes. Troop-GRIT, the air-gapped edition, runs with no internet connection at any point, with offline licensing and signed offline updates that your team verifies before installing.
It provides security capabilities such as encryption, multi-factor authentication, administrative access controls and audit logs. Organisations can configure access and deployment according to their internal security policies and applicable information-handling requirements.
Yes. The Forkout feature allows users to distribute a message or attachment to multiple users and groups in one action, making it useful for sharing launch updates, schedule changes, procedural notices and operational announcements.
Yes. Teams can communicate through web, desktop and mobile applications, helping personnel at different locations stay aligned on project updates and operational requirements.
Yes. Teams can communicate through web, desktop and mobile applications, helping personnel at different locations stay aligned on project updates and operational requirements.
Organisations can contact us for a product briefing and discuss a pilot deployment based on their team size, infrastructure, security requirements and intended workflows.
Ready to see it on your own network?
